Static task
static1
Behavioral task
behavioral1
Sample
d05efeae7e650477799887e06ba1e7e4e4f03d084d65f1b9ca4111bfb9b89bdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d05efeae7e650477799887e06ba1e7e4e4f03d084d65f1b9ca4111bfb9b89bdd.exe
Resource
win10v2004-20220812-en
General
-
Target
d05efeae7e650477799887e06ba1e7e4e4f03d084d65f1b9ca4111bfb9b89bdd
-
Size
815KB
-
MD5
35981900965ba2a47d3c6244efaa0016
-
SHA1
b17fa18333af0eee770936a90a906180a0781432
-
SHA256
d05efeae7e650477799887e06ba1e7e4e4f03d084d65f1b9ca4111bfb9b89bdd
-
SHA512
e36377c93a4aecd2738663fa57a92e7a31561f43d6d3f170c3dfd314c0d87de19b20c80e2cb30a65efffc9aab7e7fa7729f4cc8f727bd2a5818e609155e08611
-
SSDEEP
12288:j0LNULvxGaEXCFhiZYUJF+SLjwkEkSDNSu3Eru6LFOWrtivbG83cGTI7+9gdpTZ9:juNkJ5cMhRMFdLoxpB3Qxrtil1TkL
Malware Config
Signatures
Files
-
d05efeae7e650477799887e06ba1e7e4e4f03d084d65f1b9ca4111bfb9b89bdd.exe windows x86
7957c8b330de0ce2e1902abe4bfa9f33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
GetOEMCP
GetModuleHandleA
HeapValidate
DefineDosDeviceA
SetStdHandle
GetStartupInfoA
GetModuleFileNameA
VirtualAlloc
FreeEnvironmentStringsW
CloseHandle
OutputDebugStringA
HeapCreate
FlushFileBuffers
IsBadWritePtr
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetACP
GetCommandLineA
SetEndOfFile
SetConsoleCtrlHandler
SetHandleCount
GetEnvironmentStrings
ExitProcess
GetCPInfo
GetCurrentThreadId
GetCurrentProcessId
InterlockedIncrement
GetLastError
GetSystemTimeAsFileTime
ReadFile
WideCharToMultiByte
GetLocaleInfoA
WriteFile
GetFileType
DebugBreak
SetFilePointer
TerminateProcess
HeapFree
IsBadReadPtr
GetStdHandle
RtlUnwind
GetStringTypeA
LCMapStringW
GetProcAddress
GetTickCount
HeapAlloc
QueryPerformanceCounter
GetStringTypeW
QueryDosDeviceA
GetVersionExA
DeviceIoControl
LocalAlloc
CreateFileA
GetSystemInfo
InterlockedExchange
InterlockedDecrement
GetCurrentProcess
VirtualQuery
VirtualProtect
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStringsW
HeapDestroy
VirtualFree
user32
wsprintfA
advapi32
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
netapi32
NetApiBufferSize
wldap32
ord83
msvcrt
exit
Sections
.text Size: 798KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.conb Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cone Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eeee Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ